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DETAILED ACTION 

1. Claims 1-4, 6-22, 24-33, and 35-43 are presented for examination. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 01/26/2009 has been entered. 

Claim Rejections - 35 USC § 112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

4. Claims 1-4, 6-22, 24-33, and 35-43 are rejected under 35 U.S.C. 1 12, second paragraph, 
as being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. 

A. The claim language in the following claims is being considered as indefinite: 
I. As per claims 1 , 1 1 , 22 and 33, the claimed language are not clearly 

explain because the claimed limitation states "the at least one computer 
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access setting comprising a listing of prohibited computer applications to 
which access is denied" [ hereinafter as A ] [ i.e. application on this list is 
prohibiting from launch ], however, at the later part of the claim, another 
claimed limitation is written as "when the requested computer application 
is not found in the another version of the computer access setting, then the 
control unit prohibits opening the window associated with the requested 
computer application, thus terminating the launch" [ hereinafter as B ] [ 
i.e. application not on this list is also prohibiting from launch ]. So, in 
limitation A, if the requested application is found in the list of computer 
access setting, and if there is a match, then the application is prohibited 
from opening. In limitation B, if the requested application is not found in 
the list of computer access setting, and if there is no match, then the 
requested application is also being prohibited from opening, as such, in 
both cases, either match or no match, then the requested application is 
always being prohibited from opening. 



Claim Rejections - 35 USC § 103 



5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



Application/Control Number: 10/740,743 
Art Unit: 2454 



Page 4 



6. Claims 1,2,4-9, 11-13, 15-20, 22-24, 26-31, 33-35, 37-42 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Heard et al. [ US Patent Application No 2006/0242685 ], in 
view of Balogh et al. [ US Patent No 7,047,258 ], and further in view Krepetos [ US Patent 
Application No 2003/0233482 ]. 

7. As per claim 1, Heard discloses the invention as claimed including a system for 
automatically updating of computer access settings [ i.e. automatically push the security policy to 
the mobile device ] [ 810, Figure 8; Abstract; and paragraphs 0027 and 0030 ], comprising: 

at least one computer access setting for a respective user of a computer [ i.e. policy data ] 
[ paragraphs 0054, 0055, Permission Policies and Rule Policies tables ], one version of the at 
least one computer access setting being stored in a remote database [ i.e. LDAP storage 
directory ] [ 108, Figure 1; and paragraphs 0029, 0033, 0044 and 0045 ] and another version of 
the at least one computer access setting being stored in the computer [ i.e. the policy data is 
decrypted and stored in the rules engine store ] [ 612, Figure 6; and paragraph 0061, 0062 and 
0066 ]; 

a control unit to communicate with the computer [ i.e. gatekeeper ] [ 104, Figure 1; and 
paragraphs 0030 and 0031 ] and to automatically update the versions of the at least one 
computer access settings in the computer and the remote database to coincide with each other 
responsive to at least one computer event [ i.e. updating policy information and distributing the 
updated policy information to the mobile device when synchronization ] [ 808, 810, Figure 8; 
paragraphs 0059, 0073, 0074; and claims 1 and 2 ]. 

Heard does not specifically disclose 
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the at least one control access setting being stored in the remote database is updated to 
reflect changes made to the at least one control access setting being stored in the computer and 
vice versa; 

Balogh discloses 

the at least one control access setting being stored in the remote database is updated to 
reflect changes made to the at least one control access setting being stored in the computer and 
vice versa [ i.e. update the different of data in local and remote databases ] [ Figure 10A; col 11, 
lines 62-col 12, lines 15; and col 13, lines 27-38 ]; 

It would have been obvious to a person skill in the art at the time the invention was made 
to combine the teaching of Heard and Balogh because the teaching of updating data in Balogh 
would enable the same information to be maintained throughout the system to prevent system 
corruption. 

Heard and Balogh do not specifically disclose 

the at least one computer access setting comprising a listing of prohibited computer 
applications to which access is denied, 

the control unit monitoring a request to launch a computer application that would locally 
run on the computer's operating system, the control unit intercepting a message for opening a 
window associated with the requested computer application, the control unit intercepting the 
message before receipt thereof by the computer's internal operating system to prohibit opening 
the window, the control unit querying the another version of the computer access settings for 
the requested computer application, and when the requested computer application is not found 
in the another version of the computer access setting, then the control unit prohibits opening the 
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window associated with the requested computer application to terminate the launch of the 
requested computer application, as the user is not authorized to access the requested computer 
application. 

Krepetos discloses 

the at least one computer access setting comprising a listing of prohibited computer 
applications to which access is denied [ i.e. URL listed is not allowed ] [ 406, Figure 4; and 
paragraph 0027 ], 

the control unit monitoring a request to launch a computer application that would locally 
run on the computer's operating system [ i.e. determining whether a request to open browser 
window ] [ 404, Figure 4; and paragraph 0026 ], the control unit intercepting a message for 
opening a window associated with the requested computer application, the control unit 
intercepting the message before receipt thereof by the computer's internal operating system to 
prohibit opening the window [ i.e. hook into the events stream ] [ paragraphs 001 1 and 0014 ], 
the control unit querying the another version of the computer access settings for the requested 
computer application, and when the requested computer application is not found in the another 
version of the computer access setting, then the control unit prohibits opening the window 
associated with the requested computer application to terminate the launch of the requested 
computer application, as the user is not authorized to access the requested computer application 
[ i.e. block browser window from opening ] [ Figure 4; and paragraphs 0026 and 0029 ]. 

It would have been obvious to a person skill in the art at the time the invention was made 
to combine the teaching of Heard, Balogh and Krepetos because the teaching of Krepetos 
blocking of window would enable to enhance the user's web browsing experience and 
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preventing unwanted advertising windows by providing a browser toolbar and browser helper 
object extension [ Krepetos, paragraph 0002 ]. 

8. As per claim 2, Heard discloses wherein the at least one computer event includes user 
log-in on the computer and the computer being connected to the Internet [ i.e. mobile device 
initiates data synchronization and gatekeeper authenticates mobile device ] [810, Figure 8; and 
paragraphs 0069, 0072 and 0073 ]. 

9. As per claim 4, Heard discloses wherein the at least one computer event includes the start 
up of the computer and the computer being connected to the Internet [ i.e. re-authenticate after 
device has been turn off] [ Rule Policies table ]. 

10. As per claim 6, Heard discloses wherein the computer access settings contain an allow 
list of information that the respective user is authorized to access [ i.e. list of device that can be 
communicated with ] [ paragraph 0066 ]. 

11. As per claim 7, Heard discloses wherein the computer access settings contain a block list 
of information that the respective user is not authorized to access [ i.e. list of device that cannot 
be communicated with ] [ paragraph 0066 ]. 
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12. As per claim 8, Heard discloses wherein the computer access settings specify if the 
respective user is authorized to access a particular computer application [ i.e. control application 
access and use ] [ Permission Policies table; and paragraphs 0032 and 0054 ]. 

13. As per claim 9, Krepetos discloses wherein the computer access settings specify if the 
respective user is authorized to access a particular web site [ i.e. URL listed is not allowed ] [ 
406, Figure 4; and paragraph 0027 ]. 

14. As per claim 1 1, it is rejected for similar reasons as stated above in claim 1 . Furthermore, 
Heard discloses means for modifying the first version of the computer access setting [ i.e. 
modifying security policy ] [ Figure 8; and paragraphs 0071, 0073 and 0074 ]. 

15. As per claim 12, Heard discloses wherein the second version of the computer access 
settings contain a history of user computer activity [ i.e. history mobile device user activity ] [ 
paragraphs 0075 and 0076 ], the system further comprising means for transferring the second 
version of the computer access settings to the remote location so that the first version at the 
remote location is updated to include the history of user computer activity contained in the 
second version upon the at least one computer event [ i.e. the log file transfers to the server ] [ 
paragraphs 0058 and 0059 ]. 



16. 



As per claim 13, it is rejected for similar reasons as stated above in claim 2. 
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17. As per claims 15-20, they are rejected for similar reasons as stated above in claims 4-9. 

18. As per claim 22, it is rejected for similar reasons as stated above in claim 1 1 . 

19. As per claim 24, it is rejected for similar reasons as stated above in claim 13. 

20. As per claims 26-31, they are rejected for similar reasons as stated above in claims 15-20. 

21 . As per claim 33, it is rejected for similar reasons as stated above in claim 1 1 . 
Furthermore, Heard discloses querying a remotely located serer for a current time [ i.e. a time 
stamp from the server is used ]; preventing manipulation of a local clock setting by preferring the 
current time obtained from the remote server; comparing the current time to the time restrictions 

[ i.e. monitoring the mobile device clock to prevent time tampering ] [ paragraph 0059 ]. 

22. As per claim 35, it is rejected for similar reasons as stated above in claim 13. 

23. As per claims 37-42, they are rejected for similar reasons as stated above in claims 15-20. 

24. Claims 3, 10, 14, 21, 25, 32, 36, and 43 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Heard et al. [ US Patent Application No 2006/0242685 ], in view of Balogh et 
al. [ US Patent No 7,047,258 ], and further in view of Krepetos [ US Patent Application No 
2003/0233482 ] and Dunn [ US Patent No 7,076,558 ]. 
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25. As per claim 3, Heard, Balogh and Krepetos do not specifically disclose wherein the at 
least one computer event includes user log-out on the computer and the computer being 
connected to the Internet. Dunn discloses wherein the at least one computer event includes user 
log-out on the computer and the computer being connected to the Internet [ i.e. disconnect ] [ col 
37, lines 4-11]. It would have been obvious to a person skill in the art at the time the invention 
was made to combine the teaching of Heard, Balogh, Krepetos and Dunn because the teaching of 
Dunn would allow a web services user to control access to user-specific information stored in 
associated with a software service offered by a web-service provider [ Dunn, col 1, lines 6-10; 
and col 2, lines 10-21 ]. 

26. As per claim 10, Dunn discloses wherein the computer access settings specify if the 
respective user is authorized to access a category of information that includes computer 
applications and web sites [ col 8, lines 52-61 ]. 

27. As per claim 14, it is rejected for similar reasons as stated above in claim 3. 

28. As per claim 21, it is rejected for similar reasons as stated above in claim 10. 

29. As per claim 25, it is rejected for similar reasons as stated above in claim 14. 

30. As per claim 32, it is rejected for similar reasons as stated above in claim 21 . 
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31. As per claim 36, it is rejected for similar reasons as stated above in claim 14. 

32. As per claim 43, it is rejected for similar reasons as stated above in claim 21 . 

33. Applicant's arguments with respect to claims 1-4, 6-22, 24-33, and 35-43 have been 
considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Dustin Nguyen whose telephone number is (571) 272-3971. The 
examiner can normally be reached on flex. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan Flynn can be reached at (571) 272-1915. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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